ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1003 All Questions

View all questions & answers for the SPLK-1003 exam
Go to Exam

Exam SPLK-1003 topic 1 question 1 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 1
Topic #: 1
[All SPLK-1003 Questions]

Which setting in indexes.conf allows data retention to be controlled by time?

  • A. maxDaysToKeep
  • B. moveToFrozenAfter
  • C. maxDataRetentionTime
  • D. frozenTimePeriodInSecs
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by jasytpeiotqxvohxma at May 19, 2020, 12:35 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
DeltaPotato
Highly Voted 2 years, 10 months ago
D - Sys Admin slide 131 for me (indexes.conf options listed on slide 126).
upvoted 7 times
pcksplunk
4 months, 1 week ago
D is correct
upvoted 1 times
...
Prasadthorat333
1 year, 9 months ago
Please help me with the Sys admin PDF.
upvoted 1 times
...
...
nanaw770
Most Recent 1 month ago
Selected Answer: D
D is right answer.
upvoted 1 times
...
emlch
1 year, 9 months ago
I did a quickly search and the only option seems to be frozenTimePeriodInSecs (the other options isn't additional configurations of indexes.conf)
upvoted 2 times
...
Nnatech
1 year, 11 months ago
Answer is D
upvoted 1 times
...
king1993
2 years, 2 months ago
Answer: D
upvoted 3 times
...
RedYeti
2 years, 3 months ago
Selected Answer: D
D. frozenTimePeriodInSecs
upvoted 2 times
...
Apis
2 years, 5 months ago
Selected Answer: D
D is correct
upvoted 1 times
...
BMO
3 years ago
System Admin - Slide 116
upvoted 1 times
...
ZeusP
3 years, 1 month ago
Ans is D for sure
upvoted 1 times
...
MrHyde
4 years ago
understand better with this link: https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Setaretirementandarchivingpolicy
upvoted 3 times
ucsdmiami2020
2 years, 8 months ago
Agreed D. Quoting the provided URL reference, "To specify the age at which data freezes, edit the frozenTimePeriodInSecs attribute in indexes.conf. This attribute specifies the number of seconds to elapse before data gets frozen. "
upvoted 1 times
...
...
jasytpeiotqxvohxma
4 years, 1 month ago
D is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago